$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: +Ohqj7Cn/iLdXfUchEq+rSuzMmVIXTpJpj6v/HIfNAQ= Subject key identifier: 82:2F:54:B2:CF:EC:7C:02:5A:70:06:32:24:E7:70:C7:BD:F3:5F:0E Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 7EAB79AAA1389E96BF6FCF6833A9D475C1CCFCFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 63 Signing time: Wed 22 May 2024 11:01:31 +0000 Manifest this update: Wed 22 May 2024 10:56:31 +0000 Manifest next update: Sat 25 May 2024 13:14:31 +0000 Files and hashes: 1: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: MxC9/+bVrbcGn/gkwiaEp0VAE7EQaPVa6ngLPRYTxK8=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: FIvOrH/s/+9mjT6UBvMf+mB2vWMqUmpz3+OCYoPOWqs=) 3: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: W2WoD2AKTQfuMNzT0ftag+GiD+m1T1N70pLUv9xK04w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 13:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ab:79:aa:a1:38:9e:96:bf:6f:cf:68:33:a9:d4:75:c1:cc:fc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: May 22 10:56:31 2024 GMT Not After : May 25 13:14:31 2024 GMT Subject: CN=822F54B2CFEC7C025A70063224E770C7BDF35F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ad:50:c1:42:87:b5:fb:31:47:06:0a:c5:d1: 92:f3:79:29:ae:79:08:9e:bd:f3:46:ea:d7:03:7b: 1d:3c:0b:1d:d2:d7:4b:55:98:66:75:e1:4c:42:cf: 51:aa:62:00:e2:ab:0f:97:9b:04:4d:ff:fe:01:db: c6:b7:2b:ee:e0:bf:fb:9f:f0:37:61:06:b6:65:d6: 43:40:ba:dc:bd:f9:36:00:95:2b:56:c5:94:ad:78: fd:e4:ef:57:a4:f4:df:7a:cf:07:04:b6:e2:96:9a: dd:53:e8:6f:81:7b:1b:db:38:43:6a:e4:b4:8d:77: 73:ae:bd:34:d5:48:1a:06:9d:e1:59:de:56:5b:fb: 1d:07:4c:c2:d2:74:96:84:42:05:75:24:6f:de:67: ee:61:d3:1b:5b:f3:35:15:84:e3:ec:c8:bd:84:7c: 02:cb:84:4b:4a:18:21:0f:8c:67:bc:4b:67:d0:34: 65:6a:c3:ed:67:0e:39:d8:69:8e:2d:bf:6b:f5:62: a5:58:6d:15:63:34:52:0f:2f:9b:ca:5b:bd:d7:43: 0b:fc:f1:b4:6b:59:50:6a:35:a3:ca:c0:23:75:a6: c8:05:00:bd:a2:de:0b:5b:36:a2:3e:9d:b3:0c:24: d9:45:8c:fc:9f:0e:9f:c3:0e:7b:1f:14:43:d3:e7: 6a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2F:54:B2:CF:EC:7C:02:5A:70:06:32:24:E7:70:C7:BD:F3:5F:0E X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:67:04:06:b8:2e:b1:70:5a:ff:de:30:21:29:e4:50:2b:0a: 81:84:3c:50:fa:e4:12:1e:83:4f:95:bd:8f:b8:4f:e8:4c:89: a1:67:05:79:81:54:2e:cd:ae:31:97:ba:40:33:57:aa:08:0d: cc:eb:a8:9f:df:be:a5:fa:c9:08:e2:4c:37:47:6c:f1:93:3e: cd:89:89:39:88:7a:c4:87:6a:22:27:ad:1c:df:46:cf:0e:d3: 41:60:82:ee:da:21:fb:d0:f3:10:54:ff:2f:be:d2:2d:87:9c: 6a:fb:bb:bc:6b:4d:7e:dd:ae:25:e0:82:cf:ea:ea:49:0d:a2: ae:6d:9d:c1:b3:49:b1:22:05:fc:94:d9:97:49:d7:17:2e:54: 92:6e:b4:c1:48:76:35:12:00:a2:37:a1:1f:93:d9:0c:eb:2b: 2d:6c:8a:5f:3f:cf:d3:23:9b:19:b7:3c:aa:ff:6f:9f:e1:5a: 17:aa:2c:a0:48:72:b0:d1:cb:12:09:46:d6:d6:54:2e:77:59: 74:9d:ea:28:09:d3:a0:4f:60:43:e8:c1:ba:ce:7d:b7:5e:fe: 19:20:48:9e:fd:63:89:5f:d8:c6:4a:91:a2:9e:db:7a:9b:85: 37:00:02:d5:2b:71:b3:e5:bc:a8:36:dc:95:3f:5d:fd:29:3e: af:dc:66:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfqt5qqE4npa/b89oM6nUdcHM/PswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNDA1MjIxMDU2MzFaFw0yNDA1MjUxMzE0MzFaMDMxMTAvBgNV BAMTKDgyMkY1NEIyQ0ZFQzdDMDI1QTcwMDYzMjI0RTc3MEM3QkRGMzVGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDrVDBQoe1+zFHBgrF0ZLzeSmu eQievfNG6tcDex08Cx3S10tVmGZ14UxCz1GqYgDiqw+XmwRN//4B28a3K+7gv/uf 8DdhBrZl1kNAuty9+TYAlStWxZSteP3k71ek9N96zwcEtuKWmt1T6G+BexvbOENq 5LSNd3OuvTTVSBoGneFZ3lZb+x0HTMLSdJaEQgV1JG/eZ+5h0xtb8zUVhOPsyL2E fALLhEtKGCEPjGe8S2fQNGVqw+1nDjnYaY4tv2v1YqVYbRVjNFIPL5vKW73XQwv8 8bRrWVBqNaPKwCN1psgFAL2i3gtbNqI+nbMMJNlFjPyfDp/DDnsfFEPT52qBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgi9Uss/sfAJacAYyJOdwx73zXw4wHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApnBAa4LrFwWv/eMCEp5FArCoGEPFD65BIe g0+VvY+4T+hMiaFnBXmBVC7NrjGXukAzV6oIDczrqJ/fvqX6yQjiTDdHbPGTPs2J iTmIesSHaiInrRzfRs8O00Fggu7aIfvQ8xBU/y++0i2HnGr7u7xrTX7driXggs/q 6kkNoq5tncGzSbEiBfyU2ZdJ1xcuVJJutMFIdjUSAKI3oR+T2QzrKy1sil8/z9Mj mxm3PKr/b5/hWheqLKBIcrDRyxIJRtbWVC53WXSd6igJ06BPYEPowbrOfbde/hkg SJ79Y4lf2MZKkaKe23qbhTcAAtUrcbPlvKg23JU/Xf0pPq/cZo0= -----END CERTIFICATE-----Generated at Wed May 22 12:40:17 2024 by rpki-client on console-fra.rpki-client.org